I am using shared host, for the last 3 weeks, all of my websites under the same account got script injection both Wordpress and non-Wordpress site. Today I have found the injection again on the new uploaded site, problem is after checking with File Manager at cPanel, the log file and time doesn't look suspicious at all but I know what the weird script looks-like.
The question is how to "string" search all the files (each and all of them) within html_public without any knowledge of SSH? Then I could locate the file name and then perform the cleaning one by one. Please guide. (Paying someone else to do it or giving out an extra penny is not an option.) Thanks.
